$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ca3e3ab-fb49-462e-94c4-59d06cf51fec.cer File: 9ca3e3ab-fb49-462e-94c4-59d06cf51fec.cer (raw, json) Hash identifier: bjsnaWlAb0atmkceK5ikYy3DnsY5BESb3uwVs5D2aM8= Subject key identifier: A3:F3:8C:97:DE:D0:DB:E8:0F:32:5B:11:0D:1F:4F:1C:70:B4:77:89 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D9D068BDC2027189A8F678FE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ca3e3ab-fb49-462e-94c4-59d06cf51fec/9ca3e3ab-fb49-462e-94c4-59d06cf51fec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ca3e3ab-fb49-462e-94c4-59d06cf51fec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Apr 2026 13:56:41 +0000 Certificate not after: Thu 27 Jul 2028 13:56:41 +0000 Subordinate resources: AS: 14619 IP: 23.129.4.0/24 IP: 2602:f7aa::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9d:06:8b:dc:20:27:18:9a:8f:67:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 24 13:56:41 2026 GMT Not After : Jul 27 13:56:41 2028 GMT Subject: CN=9ca3e3ab-fb49-462e-94c4-59d06cf51fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8d:81:cf:76:4e:85:19:96:0b:a4:8a:0f:7d: 6e:5a:9a:c9:ac:38:d7:41:83:de:6e:40:10:91:5f: e3:a7:a6:04:78:ee:f4:af:7f:f1:74:77:a3:46:91: 4a:7a:0f:79:a8:5b:d4:95:e6:63:f7:d0:3f:41:8d: 2d:3a:01:59:6f:e3:31:9a:7a:22:b3:1a:13:62:81: 9d:a1:a8:3c:08:81:4e:22:74:26:87:90:d1:cc:6c: f1:4d:83:7a:8f:0c:45:f8:e3:00:d6:c6:11:c3:9f: 7e:87:28:70:c1:df:2a:b4:39:9b:38:bb:bc:65:23: 93:0d:f5:39:69:34:87:5b:3c:06:ae:3e:6d:71:a4: 3d:25:27:6d:1b:c5:49:c6:63:84:80:f8:b2:99:b3: dd:f5:1d:0c:9a:42:9e:cc:2a:8a:16:b9:bc:86:61: c7:7a:c7:16:ce:03:5b:de:62:bd:fc:8e:f1:93:02: a1:8c:56:b4:4d:5e:fe:3d:f4:34:4d:1f:b3:ad:26: 9e:a0:6d:5a:11:e7:ae:85:59:2a:f7:0a:f1:5a:fc: 36:c7:91:49:80:0e:fd:4d:06:c3:fd:ce:63:af:ef: 9a:fa:d6:c8:1c:7e:8f:5f:19:b8:fe:e6:5f:30:cb: 0a:44:92:0d:b5:1b:47:f6:91:d4:b1:5d:76:6b:06: 02:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F3:8C:97:DE:D0:DB:E8:0F:32:5B:11:0D:1F:4F:1C:70:B4:77:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ca3e3ab-fb49-462e-94c4-59d06cf51fec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ca3e3ab-fb49-462e-94c4-59d06cf51fec/9ca3e3ab-fb49-462e-94c4-59d06cf51fec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.129.4.0/24 IPv6: 2602:f7aa::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14619 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:90:7b:c7:9c:32:ae:27:cc:2e:52:34:c0:82:c0:5d:06:61: 6a:77:de:90:88:6c:c2:c7:ca:b0:1b:95:ef:0d:ee:90:d4:98: 7f:cd:74:82:59:33:63:a6:1a:bd:b2:62:02:8d:37:17:11:82: 5f:d6:79:f0:ee:8a:24:27:56:69:b2:ba:d1:c5:7a:b0:c0:3a: 11:be:89:1b:a5:20:d6:b7:42:8a:6d:c6:7a:71:da:96:12:20: 79:3c:eb:60:db:b1:e9:6c:5d:ed:41:8b:7a:10:be:c0:2a:4e: 07:97:d7:77:0d:81:b9:f6:08:5d:63:7d:c4:16:9b:b1:75:2d: ef:c8:ce:2a:dd:5e:ed:ad:50:46:3e:67:51:3b:95:cd:d1:47: 9c:51:b4:fb:10:11:49:fc:22:55:be:f6:3c:09:7d:34:f1:69: 3a:61:11:5b:4f:c3:6e:50:26:06:ca:32:41:9d:90:4b:66:5b: 36:e5:e2:a7:72:e4:da:dc:6d:ef:0b:ef:6a:0c:c6:1d:14:6a: a2:f7:46:69:65:70:ec:57:bc:92:e1:11:31:d9:2f:62:f9:07: 80:1d:3b:0d:a5:46:26:71:ca:ea:6b:ae:77:d4:e9:54:d1:17: 24:25:2c:73:12:3b:d8:10:00:da:73:7f:dd:07:68:73:18:e2: 65:49:1e:fb -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE2dBovcICcYmo9nj+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyNDEzNTY0MVoXDTI4MDcyNzEzNTY0MVowLzEtMCsGA1UEAxMk OWNhM2UzYWItZmI0OS00NjJlLTk0YzQtNTlkMDZjZjUxZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA442Bz3ZOhRmWC6SKD31uWprJrDjXQYPebkAQ kV/jp6YEeO70r3/xdHejRpFKeg95qFvUleZj99A/QY0tOgFZb+MxmnoisxoTYoGd oag8CIFOInQmh5DRzGzxTYN6jwxF+OMA1sYRw59+hyhwwd8qtDmbOLu8ZSOTDfU5 aTSHWzwGrj5tcaQ9JSdtG8VJxmOEgPiymbPd9R0MmkKezCqKFrm8hmHHescWzgNb 3mK9/I7xkwKhjFa0TV7+PfQ0TR+zrSaeoG1aEeeuhVkq9wrxWvw2x5FJgA79TQbD /c5jr++a+tbIHH6PXxm4/uZfMMsKRJINtRtH9pHUsV12awYC3QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKPzjJfe0NvoDzJbEQ0fTxxwtHeJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85 Y2EzZTNhYi1mYjQ5LTQ2MmUtOTRjNC01OWQwNmNmNTFmZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzljYTNlM2FiLWZiNDktNDYyZS05 NGM0LTU5ZDA2Y2Y1MWZlYy85Y2EzZTNhYi1mYjQ5LTQ2MmUtOTRjNC01OWQwNmNm NTFmZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgQQwDgQCAAIwCAMGBCYC96oAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjkbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACmQe8ecMq4nzC5SNMCCwF0GYWp3 3pCIbMLHyrAble8N7pDUmH/NdIJZM2OmGr2yYgKNNxcRgl/WefDuiiQnVmmyutHF erDAOhG+iRulINa3Qoptxnpx2pYSIHk862DbselsXe1Bi3oQvsAqTgeX13cNgbn2 CF1jfcQWm7F1Le/IzirdXu2tUEY+Z1E7lc3RR5xRtPsQEUn8IlW+9jwJfTTxaTph EVtPw25QJgbKMkGdkEtmWzbl4qdy5Nrcbe8L72oMxh0UaqL3RmllcOxXvJLhETHZ L2L5B4AdOw2lRiZxyuprrnfU6VTRFyQlLHMSO9gQANpzf90HaHMY4mVJHvs= -----END CERTIFICATE-----Generated at Wed May 13 02:48:16 2026 by rpki-client